Enterprise Governance Analyst

This role coordinates the governance and administration that keeps our client's security controls operating effectively.As the firm moves towards embedding efficiencies and AI tools, this role will play a key part in maintaining registers, records and procedures, administering testing and assurance processes, tracking remediation and security debt.

You'll also represent the security function on key governance forums and Working Groups

Skills/Experience:

• Qualifications related to Enterprise Security are desirable


• Experience maintaining control registers, procedures, evidence and audit trails


• Ability to coordinate penetration testing, security exceptions, audits and remediation activity


• Good understanding of cyber security, infrastructure and risk-management concepts


• Experience producing management information, key risk indicators and clear progress reporting


• Working knowledge of AI governance, application approval and technology change controls


• Strong attention to detail with the ability to follow issues through to closure


• Good supplier, stakeholder and service-management skills


• Relevant technology, security or risk-management certification is desirable

Core Responsibilities:

• Maintain AI application, agent and solution registers, including ownership, guardrails, approvals and periodic re-attestations


• Administer AI application-approval processes and track material changes to models, features and supporting platforms


• Track ongoing peer review of AI-generated code and maintain evidence required by the AI governance process


• Administer penetration tests, red-team exercises and security exceptions, ensuring findings and actions are recorded and tracked


• Coordinate internal and external audits and track regulatory and standards remediation to completion


• Maintain security procedures and map control frameworks to relevant standards and requirements


• Coordinate security-debt remediation and provide clear reporting on backlog, ownership and progress


• Produce security management information and complete scheduled key-risk-indicator reporting


• Triage non-incident security requests and coordinate follow-up with the Help Desk and relevant Technology teams


• Coordinate access reviews and maintain the evidence required to demonstrate completion


• Monitor emerging regulatory and standards developments and flag potential impacts for assessment


• Coordinate supplier security meetings and track agreed actions and remediation


• Publish internal threat-intelligence and security-awareness communications

Core-Asset Consulting is an equal opportunities recruiter and we welcome applications from everyone irrespective of age, disability, gender, gender identity or expression, race, colour, ethnic or national origin, sexual orientation, religion or belief, marital/civil partner status or pregnancy.

To apply for this vacancy applicants must be eligible to work in the UK in accordance with the Immigration, Asylum and Nationality Act 2006.